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WHAT IS CLAIMED IS: 



1. A quantitative competition method for a system in which a plurality 
of participant devices send their secret aimed values to a server device and 

5 said server device determines which of said plurality of participant devices 
has offered the maximum or minimum one of said aimed values received, said 
method comprising the steps wherein: 

(a) each of said participant devices processes an initial value peculiar 
to said participant device with a predetermined one-way function by the 

10 number of times corresponding to said aimed value to generate aimed value 
information; 

(b) either one of said each participant device and said server device 
processes said initial value with said one-way function to generate an updated 
initial value; 

1 5 (c) said server device makes a check for matching between said 

updated aimed values and said aimed value information of said participant 
devices; and 

(d) upon first detection of matching in said step (c), said server device 
decides that said aimed value of that one of said participant devices which 
20 corresponds to said updated value having matched said aimed value 
information is maximum or minimum. 

2. The method of claim 1, fiirther comprising a step of repeating the 
updating of said initial value in said step (b) and the check for matching in 
said step (c) when no matching is detected in said step (c). 

25 3. The method of claim 2, wherein said step (b) includes a step of 

generating said updated initial value by said server device. 

4. The method of claim 3, wherein: there is provided a conversion 
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table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values 
corresponding thereto; 

said step (a) includes a step wherein, letting M be the number of 
participant devices, an m-th participant device m computes said aimed value 
information by 

- gCh'^^CIV J) 

where g is a one-way function, IV^ is said initial value, is an index 
corresponding to said aimed value of said participant device m, and h^'"(IV^) 
indicates that said initial value IV^^ is processed with said one-way function h 
by times; 

said step (b) includes a step wherein said server device generates said 
updated initial value by 

= g(h^(IV J); and 

said step (c) includes a step of making a check for said aimed value 
information y^ = D^. 

5. The method of claim 2, wherein said step (b) includes a step 
wherein said each participant device generates said updated value by the 
number of times requested by said server device and sends said updated initial 
value to said server device. 

6. The method of claim 5, wherein: there is provided a conversion 
table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values 
corresponding thereto; and 

said step (a) includes the steps wherein: 
(a-1) letting M be the number of participant devices, an m-th 
participant device m computes said aimed value information by 
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Y. = g(hniVJ) 

where g is a one-way function, IV^^ is said initial value, is an index 
corresponding to said aimed value of said participant device m, and h*^"'(IV^) 
indicates that said initial value IV^ is processed with said one-way function h 
by times; 

(a-2) said each participant device generates verification information 
= h^^^(IV^) and sends it to said server device together with said aimed 
value information y^^^; and 

(a-3) said server device publishes said aimed value information and 
said verification information = h^''^(IV^) received from said each 
participant device on a buUeting board accessible from all of said participant 
devices. 

7. The method of claim 6, wherein: said step (b) includes the steps 
wherein: 

(b-1) said server device requests said each participant device to send 
= h^(IVjn) corresponding to said index k; and 

(b-2) said each participant device responds to the request of said 
server device to generate = h^IV^) corresponding to said index k as said 
updated initial value and sends it to said server; and 

said step (c) includes a step of generating giD^) and making a check 
for said aimed value information = g(Dm)* 

8. The method of claim 7, wherein: said step (b) includes a step (b-0) 
wherein said server device sets said index k to an upper limit value K; and 

said step (c) includes the steps wherein said server device: 
(c-1) pubhshes said ^ h^(IV^) received from said each participant 
device on said bulletin board; 

(c-2) computes said g(D^) for said each participant device m; 
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(c-3) makes a check to see if said g(Dj„) matches said aimed value 
information; 

(c-4) if no match is detect for any of said m in said step (c-3), replaces 
said with said C^, decrementing said index k by one and returns to said 
step (b-1); and 

(c-5) if a match is detected in said step (c-3), determines that the value 
corresponding to said index k at that time is said maximum or minimum 
aimed value. 

9. The method of claim 8, wherein said step (c-1) includes a step 
wherein said server device generates h(D^) and makes a check to see if h(D^) 
= holds. 

10. The method of claim 8, wherein said step (c-5) includes a step 
wherein said server device publishes said determined maximum or minimum 
aimed value and said h*^(IV^) on said bulletin board. 

11. The method of claim 5, wherein: there is provided a conversion 
table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values 
corresponding thereto; and 

said step (a) includes the steps wherein: 
(a-1) letting M be the number of participant devices, an m-th 
participant device m computes said aimed value information by 
= g(h'^'"aV J) 

where g is a one-way function, IV^ is said initial value, k„ is an index 
corresponding to said aimed value of said participant device m, and h'""(IVm) 
indicates that said initial value IV^ is processed with said one-way function h 
by k„ times; 

(a-2) said each participant device generates verification information 
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= h^^^(IV^) and sends it to said server device together with said aimed 
value information y^^; and 

(a-3) said server device pubUshes said aimed value information y^^ and 
said verification information C^^ = h^''^(IV^) received from said each 
participant device on a buUeting board accessible from all of said participant 
devices; 

said step (b) includes the steps wherein: said server device: 

(b-0) said server device sets said index k to an upper limit value K; 

(b-1) said server device inquires said each participant device m about 
whether said aimed value information corresponds to said index; 

(b-2) said server device checks whether an answer from said each 
participant device acknowledges said correspondence; 

(b-3) if said answer from said each participant device denies said 
correspondence, said server device decrements said k by one and retiuns to 
said step (b-1); 

(b-4) if said answer from said each participant device acknowledges 
said correspondence, said server device requests said each participant device 
to present an updated initial value h^(IVj„); 

(b-5) said each participant device generates = h^(IV^) using said 
initial value IV^ of its own and sends said D^^ to said server device; and 

(b-6) said server device publishes said from said each participant 
device on said bulletin board; and 

said step (c) includes the steps wherein said server device: 

(c-1) generates h(D J's for all of said D^'s received from all of said 
participant devices; 

(c-2) checks whether said h(D^)'s match said verification information 
C^'s on said bulletin board, respectively; 



52 



(c-3) if no mismatch is detected in said step (c-1), generates g(Dj) for 
Dj presented by a participant device j having bid; 

(c-4) checks whether said g(Dj) matches said aimed value information 
Yj of said participant device j on said bulletin board; and 
5 (c-5) if said g(Dj) matches said Yj in said step (c-4), decides that said 

participant device j sent to said server device said aimed value information 
corresponding to said aimed value k. 

12. The method of claim 1, wherein: there is provided a conversion 
table showing the relationships between a sequence of values selectable as 
10 said aimed values and a sequence of indexes k of integral values 
corresponding thereto; and 

said step (a) includes the steps wherein: 

(a-1) letting M be the number of participant devices, an m-th 
participant device m computes said aimed value information by 
15 = gCh-^-CIV J) 

where g is a one-way function, IV^ is said initial value, k^ is an index 
corresponding to said aimed value of said participant device m, and h*'"'(IV^) 
indicates that said initial value IV^ is processed with said one-way function h 
by k^ times; 

20 (a-2) said each participant device generates verification information 

C„ = h^^^CIV J; 

(a-3) said each participant device m generates h(PR^(+)R^) from a 
random number and said aimed value PR^ and sends said h(PR^(+)R^) to 
said server device together with said y^ and said C^, said (+) represents a 
25 predetermined arbitrary operation; 

said step (b) includes the steps wherein: 

(b-1) said server device publishes its received Ym^ KPRm("^)Rm) and 
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JD^ on said bulletin board; 

(b-2) said server device requests said each participant device to 
present said aimed value PR^ and said random number R^; 

(b-3) said each participant device sends said aimed value PR^ and said 
random number to said server device; 

(b-4) said server device determines from its received PR^ and R^ an 
index k corresponding to the maximum one of said aimed values and a 
participant device j having sent said aimed value information corresponding 
to said index k; 

(b-5) said server device request all of said participant devices to 
present h^(IV^); and 

(b-6) said each participant device generates D^=h^(IV^) as said 
updated initial value using the initial value IV^ of its own, and sends said 
Djjj=h*^(IVjJ to said server device; 

said step (c) includes the steps wherein said server device: 

(c-1) publishes all of its received D^^'s on said bulletin board; 

(c-2) generating h(Dj^)'s for all of said D^^'s; 

(c-3) checks whether said h(D^)'s match said verification information 
C^'s on said bulletin board, respectively; 

(c-4) if no mismatch is detected in said step (c-3), generates g(Dj) for 
Dj presented by said participant device j having sent said maximum aimed 
value determined in said step (b-4); and 

(c-5) checks whether said g(Dj) matches said aimed value information 
Yj of said participant device j on said bulletin board; and 

said step (d) includes a step wherein if a match is detected in said step 
(c-5), said server device decides that said participant device j sent said aimed 
value information for said aimed value k. 
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13. The method of claim 12, wherein said step (d) includes the steps 

of: 

(d-1) generating = g(h'-*^(h*^(IV J) for t such that k<t<K and for all 
of said m's except said j; 
5 (d-2) checking whether these E^^'s match said aimed value information 

on said bulletin board; and 

(d-3) if no match is detected in said step (d-2), deciding that said k is 
an index corresponding to the maximum or minimum aimed value, and 
outputting said k and said identifier ID^^^ of said participant device j having 
10 presented said aimed value. 

14. The method of claim 12 or 13, wherein: said each participant 
device m adds to the computation using said aimed value PR^ and said 
random number in said step (a-3) additional information 1^^ about said 
aimed value information by said each participant device m, and outputs 

15 h(PR^(+)U+)IC); and 

in said step (b-2) said server device requests all of said participant 
devices to present said additional information as well as said aimed value 
PR^ and said random number R^, 

15. The method of claim 1, wherein: there is provided a conversion 
20 table showing the relationships between a sequence of values selectable as 

said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto; 

said step (a) includes the steps wherein: 

(a-1) each said bidding device generates h(H^^^^) as aimed value 
25 information of said each participant device by repeating, for each of a 

sequence of index values k from at least k^^ corresponding to an aimed value 
of said each participant device to an upper limit index value K, processing of: 
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combining an initial value of said each participant device with select 
information to provide combined information and 

operating a one-way function h on said combined information to 
generate an updated value, said select information indicating whether said 
5 each index value k is an aimed value or not; and 

sends said aimed value information H^^^Ho said server device; 

(a-2) said server device publishes said received aimed value 
information Hj^^ on a bulletin board accessible from all of said participant 
devices; 

10 said step (b) includes the steps wherein: 

(b-1) said server device requests said each participant device to send 
an updated initial value {H^^*''^^ ^J^^} corresponding to each value of said 
index k in the descending order from K; and 

(b-2) said each participant device generates and sends {H^^*''^^ ^J^^} 
15 as said updated initial value to said server device; 

said step (c) includes the steps wherein said server device: 
(c-1) publishes on said bulletin board said updated initial value {H^^^'^\ 
bj^^} received from said each participant device; 

(c-2) processes said updated initial value Hj-^^ with a one-way 
20 function h to generate H^^*^^^ h(H^^^-^>l|b J'^^); 

(c-3) checks whether said updated initial value Hj^^ matches H^^^^^^ 
received previously; and 

(c-4) if a match is detected in said step (c-3), decides whether said 
select information b^^*"^ represents that the corresponding index k is the index 
25 kjj, of said aimed value; and 

said step (d) is a step wherein if the result of decision in said step (c-4) 
is true, said server device outputs said index concemed and the corresponding 
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participant device number and if the result of decision is false, said server 
device returns to said step (b) and repeats processing for the next index value 
k. 

16. The method of claim 1, wherein: there is provided a conversion 
5 table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto; 

said step (a) includes the steps wherein: 

(a-1) upon each processing of said initial value with said one-way 
10 function h, said each participant device generates an updated initial value by 
adding said processed initial value with select information b^^^^^ indicating 
whether said processed initial value is an aimed value for one value of said 
index k, and generates H^^^^^ by repeatedly performing this processing from at 
least that index k^ of a sequence of indexes which corresponds to said aimed 
1 5 value to the upper limit value K, and sends said H^,^^^ as said aimed value 
information to said server device; 

(a-2) said server device publishes its received aimed value information 
Hj^^ on a bulletin board accessible from all of said participant devices; 

said step (b) includes the steps wherein: 
20 (b-1) for each value of said index k in descending order from K, said 

server device inquires said each participant device about whether it has bid for 
said index k, and said each participant device responds YES or NO to said 
inquiry; 

(b-2) upon first detection of the response YES, said server device 
25 requests said each participant device to send its updated initial value H^^*"'^^; 
and 

(b-3) said each participant device generates and sends (H^^*"'^^ = h(H^^*'' 
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2^11 b^^*""^^) as said updated initial value to said server device; 

said step (c) includes the steps wherein said server device: 

(c-1) publishes on said bulletin board said updated initial value (Rj^' 
received from said each participant device; 

(c-2) letting a and a represent predetermined values of said select 
information b^^''^ indicating bidding and not bidding, respectively, generate, 
for said participant device m having bid for the current index k, 

H„ = h(...h(h(H,nia)l|a)...||a) 
through the use of said updated initial value and for every one of the 

other participant devices m, generate 

H, = h(...h(h(H^^'^-^)||a)||a)...lU) 
through the use of said updated initial values H^^^'^^; 

(c-3) checks whether said for said each participant device matches 
said aj^-^ published on said bulletin board; and 

(c-4) if a match is detected in said step (c-3), determines that said 
participant device having responded YES is the winning bidding device, and 
publishes the current value of said index k as the index of the aimed value 
of said winning bidding device. 

17. The method of claim 1, wherein: there is provided a conversion 
table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto, and let the initial value of said each participant device 
be represented by IV^, where m = 1,2, ...,M, M being an integer equal to or 
greater than 2; 

said step (a) is a step wherein said each participant device generates 
jjjK) ^ j^K-km^gxmgY^^>j using a predetermined positive integer x^, said initial 
value IVj^ and one-way functions h and g, and sends said H^^^*^^ as said aimed 



58 



value information to said server device; 

said step (b) includes the steps wherein: 

(b-1) said server device publishes said aimed value information on 
a bulletin board accessible from all of said participant devices; 

(b-2) said server device sends said index k to said each participant 
device to ask for its updated initial value; 

(b-3) said each participant device decides whether its received index k 
is the index k^ corresponding to said aimed value; 

(b-4) if the result of decision in step (b-3) is k = k^, said each 
participant device generates and sends H^^*""^^ = g^'^(IV J as said updated 
initial value to said server device; and 

(b-5) if the result of decision in said step (b-3) is not k = k^, said each 
participant device generates and sends H^^*"^^ = h^'*'°"^(g™(IVJ) as said 
updated initial value to said server device; 

said step (c) includes the steps wherein said server device: 

(c-1) processes said updated initial value H^^*""^^ with said one-way 
function h to generate h(Hjj,^*''^^); 

(c-2) decides whether said h(Hj*''^^) is equal to said aimed value 
information H^^^^; 

(c-3) if it is decided in said step (c-2) that they are equal, updates said 
aimed value information Hj^^ with said updated initial value Hj„^^'^^, then 
decrements said index k by one and return to said step (b-2); 

(c-4) if it is decided in said step (c-2) that they are not equal, processes 
said updated initial value H^^^'^^ with said one-way function g to generate 
g(H^^^-^>); and 

(c-5) decides whether said g(Hj^"^^) matches said aimed value 
information H^^^^^^; and 
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said step (d) is a step wherein if a match is detected in said step (c-5), 
decides that the aimed value of said participant device corresponding to m and 
k having provided said match is the maximum or minimum. 

18. The method of claim 1, wherein: there is provided a conversion 
5 table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto; 

said step (a) includes the steps wherein: 

(a-1), letting the initial value of said each participant device be 
10 represented by IV^, where m=l,2, ...,M, M being an integer equal to or 
greater than 2, said each participant device generates H^^^^ = h^"*''"(g^"'(IV J) 
using a predetermined positive integer x^, said initial value IVj„ and one-way 
functions h and g, and sends said H^^ as said aimed value information to said 
server device; and 

15 (a-2) said server device publishes its received aimed value information 

H J*^^ on a bulletin board accessible from all of said participant devices; 
said step (b) includes the steps wherein: 

(b-1) for each value of said index k in descending order from said 
server device inquires said each participant device about whether it has bid for 
20 said index k, and said each participant device responds YES or NO to said 
inquiry; 

(b-2) upon first detection of the response YES, said server device 
requests said each participant device to send its updated initial value Hj„^^"^^; 

(b-3) said each participant device decides whether its received k is the 
25 index k corresponding to said aimed value; 

(b-4) if the result of decision in said step (b-3) is k = k^, said each 
participant generates and sends H^^*"'^^ = ^'\^^m) said updated initial 
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value to said server device; and 

(b-5) if the result of decision in said step (b-3) is not k = k^, said each 

participant device generates and sends H^^*""^^ = g^'^(IV^ as said updated 

initial value to said server device; and 

said step (c) includes the steps wherein said server device: 

(c-1) for said updated initial value Uj^'^^ received from said 

participant device having responded YES, generates 

and for said updated initial value received from said each participant device 
having responded NO, generates 

(c-2) checks whether all of said H,^ are equal to said aimed value 
information H published on said bulletin board; and 

(c-3) if it is decided in said step (c-2) that they are equal, determines 
that said participant device having responded YES is the winning bidding 
device, and publishes the current value of said index k as the index k of the 
aimed value of said winning bidding device. 

19. The method of claim 1, wherein: there is provided a conversion 
table showing the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto, and let the initial value of said each participant device 
be represented by IV^^j, where m = 1,2, . . . , M, M being an integer equal to or 
greater than 2; 

said step (a) is a step wherein said each participant device generates 
Hn,^^^ = h^'*'"'(g™(IV^)) using a predetermined positive integer x^, said initial 
value TV^ and one-way functions h and g, and sends said H^^^^ as said aimed 
value information to said server device; 



61 

said step (b) includes the steps wherein: 

(b-1) said server device publishes said aimed value information H^^^^ 
on a bulletin board accessible j5*om all of said participant devices; 

(b-2) said server device sends said index k to said each participant 
5 device to ask for its updated initial value; 

(b-3) said each participant device decides whether its received index k 
is the index k^ corresponding to said aimed value; 

(b-4) if the result of decision in step (b-3) is k = 1<^, said each 
participant device generates and H^^*"'^^ = g™"^(IV J as said updated initial 
10 value and sends it to said server device together with a flag indicating that 
said k and k^ are equal; and 

(b-5) if the result of decision in said step (b-3) is not k = k^, said each 
participant device generates and sends H^^^'^^ = h*''*'"'"^(g^(IV^)) as said 
updated initial value to said server device; 
15 said step (c) includes the steps wherein said server device: 

(c-1) checks whether its received updated initial value H^,^*""^^ is added 
with said flag; 

(c-2) if it is decided in said step (c-1) that said flag is added, processes 
said updated initial value Hj^"^^ with said one-way function g to generate 

20 giRj^^-'^y, 

(c-3) decides whether said g(Hj^'^^) matches said aimed value 
information H^^^^^; 

(c-4) if it is decided in said step (c-1) that no flag is added, processes 
said updated initial value Hj*"'^^ with said one-way function h to generate 
25 h(H^(^-^)); 

(c-5) decides whether said h(Hj*'"^^) matches said aimed value 
information H„^*^^; 
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(c-6) if it is decided in said step that they are equal, updates said aimed 
value information H^^^^ with said initial value Hj^'^K then decrements said 
index k by one and retum to said step (b-2); and 

(c-7) if it is decided in said step (c-5), processes said initial value H^^^" 
5 with said one-way function g to generate g(H^^^'^^) and returns to said step 
(c-3); and 

said step (d) is a step wherein if a match is detected in said step (c-3), 
decides that the aimed value of said participant device corresponding to m and 
k having provided said match is the maximum or minimum. 

10 20. A quantitative competition method for a system in which a 

plurality of participant devices send their secret aimed values to a server 
device and said server device determines which of said plurality of participant 
devices has offered the maximum or minimum one of said aimed values 
received, and in which there is provided a conversion table showing the 

15 relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, and m = 1, 2, . . . , M, M being an integer equal to or greater than 2; 
said method comprising the steps wherein: 

(a) each of said participant devices processes, with a predetermined 
20 one-way function h and through the use of said conversion table, information 

k(+)bj„^*'^(+)R^^*'\ which contains each index k equal to or larger than an index 
k^ corresponding to said aimed value, select information hj^^ indicating 
whether said index k corresponds to said aimed value, and a random number 
Rj^\ to generate at least K-kj„+l pieces of aimed value information 
25 h(k(+)bj^^*'^(+)R^^^^), and sends these pieces of aimed value information to said 
server device, A(+)B representing a predetermined arbitrary operation; 

(b) said server device publishes its received aimed value information 
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on a bulletin board accessible from all of said participant devices; 

(c) said server device obtains said random number corresponding 
to each of said sequence of indexes k; 

(d) letting a be a predetermined value with which said select 
5 information b^^*"^ indicates said aimed value, said server device calculates 

h(k(+)a(+)R^«); 

(e) said server device checks said aimed values on said bulletin board 
for matching with said calculated h(k(+)a(+)R^^^^); and 

(f) if a match is detected in said step (e), said server device decides 
10 that the aimed value of the aimed value information of a participant device 

having sent said random number R^^*"^ at that time is the maximum or 
minimum value. 

21. The method of claim 20, farther comprising a step wherein if a 
match is detected in said step (d), said server device repeats said steps (c), (d) 

15 and (e) for the next value of said index k. 

22. The method of claim 21, wherein said step (c) includes the steps 
wherein: said server device requests said each participant device to send said 
random number R^^*^^ corresponding to said index k; said each participant 
device sends said requested random number R^,^^^ to said server device; and 

20 said server device receives said random number R^^^^- 

23. The method of claim 21, wherein: 

said step (a) includes a step wherein said each participant device sends 
said aimed value information h(k(+)bJ'^^(-i-)R^^*'^) to said server device 
together with said random number R^,^^^; 
25 said step (b) includes a step wherein said server device stores said 

random number R^^^^ in a nonpublic memory; and 

said step (c) includes the steps wherein: said server device requests 
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said each participant device to send said random number R^^*"^ corresponding 
to said index k; said each participant device sends said requested random 
number R^^*"^ to said server device; and said server device receives said 
random number 

5 24. The method of claim 4, 12, 15, 16, 17, 18, 19 or 20 wherein said 

sequences of indexes k and values selectable as said aimed values are both 
monotonous increasing values in the same direction, and in said step (c) said 
server device determines the maximum aimed value. 

25. The method of claim 4, 12, 15, 16, 17, 18, 19 or 20, wherein said 
10 sequences of indexes k and values selectable as said aimed values are both 

monotonous increasing values in opposite directions, and in said step (c) said 
server device determines the minimum aimed value. 

26. The method of claim 4, 12, 15, 16, 17, 18, 19 or 20, wherein let an 
arbitrary aimed value be represented by PR = F(k)-HQ, where F(k) is a value in 

15 said conversion table corresponding to said index k and Q is a fraction which 
is a positive integer which satisfies F(k+l)-F(k)>Q>0; 

said step (a) includes a step wherein, letting said aimed value PR^ of 
said each participant device m be represented by PR^ = F(k^+Q^, said each 
participant device m generates said aimed value information by processing 
20 said initial value with said one-way function h by the number of times 
corresponding to k^, sends said aimed value information to said server device 
together with said fraction Q^^, where m = 1, 2, M, M being an integer 
equal to or greater than 2; 

said step (b) includes a step wherein said server device publishes said 
25 aimed value information and said fraction on a bulletin board accessible 
from all of said participant devices; 

said step (c) includes a step where said server device makes a check 
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for matching between said updated initial value and said aimed value 
information for each index value in an ascending or descending order of said 
fraction where m = 1 , 2, . . . , M; and 

said step (d) includes a step wherein upon first detection of a match in 
5 said step (c), said server device finishes said check and determines, fi-om 
and m at the time of detecting the match, that PR^ = F(k^)+Q^ is said 
maximum or minimum aimed value. 

27. The method of claim 1, 4, 12, 15, 16, 17, 18, 19 or 20, fiirther 
O comprising the steps wherein: 

^ 10 (0-1) said each participant device m sends its identifier ID^^ to a 

provisional identifier registration device; 
B (0-2) said provisional identifier registration device issues a provisional 

3 identifier AID^, for said identifier ED^, and stores said identifier JD^ and said 

^ provisional identifier AfD^^ in pair form in storage means; 

^ 15 (0-3) said provisional identifier registration device sends said 

''''^ provisional identifier AJD^^j to said each participant device; and 

(0-4) said each participant device m sends said provisional identifier 

AIDjn as said identifier to said server device, together with said aimed value 

information. 

20 

28. A participant device for a system in which M participant devices 
send their aimed values to a server device and said server device determines 
which of said M participant devices has offered the maximum or minimum 
one of said aimed values received, said participant device comprising: 

25 aimed value generating means; 

aimed value transforming means which processes said aimed value 
with a predetermined one-way function by the number of times corresponding 
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to said aimed value to obtain aimed value information; and 

sending means for sending to said server device said aimed value 
information and an identifier specifying said participant device. 

29. The participant device of claim 28, wherein said aimed value 
transforming means comprises: 

a conversion table for converting said aimed value PR^ to the 
corresponding index k^; 

a one-way function h processor which processes an initial value IVj^ 
inherent to said participant device with a one-way function h by the number 
of times corresponding to said index to obtain an output h*""(IVjj^); and 

a one-way function g processor which processes said output from said 
one-way function h processor with a one-way function g to obtain said aimed 
value information. 

30. The participant device of claim 29, further comprising verification 
information generating means which generates = h^''^(IV^) as verification 
information by processing said initial value IV^^ with said one-way function h 
K+1 times and sends said verification information C^^ to said server device. 

31. The participant device of claim 28, wherein said aimed value 
information transforming means comprises: 

a memory in which there is stored a conversion table which defines 
the relationships between a sequence of monotone varying values selectable 
as aimed values and a sequence of indexes, for converting said aimed value 
PR^ to the corresponding index k^; 

a one-way fimction h processor which processes an initial value 
inherent to said participant device with a one-way fimction h by the number 
of time corresponding to said index and outputs h*'"'(IV^); and 

a one-way function g processor which processes the output from said 
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one-way function h processor with a one-way function g to obtain said aimed 
value information. 

32. The participant device of claim 28, which further comprises: a 
random generator for generating a random number R^; an operating device 
for operating said random number and said aimed value PR^ to obtain 
PR^(+)R^; one-way function h processing means for processing said 
PR^(-i-)R^ with a one-way function h to obtain h(PR^(+)R^); and verification 
information generating means for processing said initial value IV^ with said 
one-way function h K+1 times to generate = h^^^(IV J; and wherein said 
h(PR^(+)R^) and said verification information are sent to said server device 
together with said aimed value information. 

33. The participant device of claim 28, wherein said aimed value 
transformer comprises: 

a conversion table memory which has stored therein a conversion table 
which defines indexes k == 1,2, . . . , K corresponding to K kinds of values 
selectable as aimed values; 

a select information generator which generates select information hj^^ 
indicating whether to select an aimed value corresponding to each of said 
indexes k === 1, 2, K; 

a random generator which generates a random number R^^^^ inherent 
to said participant device m and said index k; 

an operating device which receives said index k, said random number 
R^^*"^ and said select information b^,^*^^ and performs an operation 

a one-way function h processor which processes said k(+)bjn^*^^(+)Rj^^*^^ 
with a one-way function h to obtain h(k(+)bj„^*'^(+)R^^*'^); and 

a control device which computes said h(k(+)b J*'^(+)Rj„^^^) for each of 
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said indexes k and provides the k pieces information as said aimed value 
information. 

34. The participant device of claim 28, wherein said aimed value 
transformer comprises: 
5 a conversion table memory which has stored therein a conversion table 

which defines indexes k = 1, 2, . . . , K corresponding to K kinds of values 
selectable as aimed values, for converting said aimed value PR^ to the 
corresponding index k^; 

initial value updating means which, for each index k, processes an 
10 initial value with a one-way function h and adds the processed initial value 
with select information hj^^ for said index k to obtain an updated initial value 
and repeats this processing until k = K is reached, thereby generating H^^^^; 

select information generator which generates said select information 
bj*"^ whether said aimed value corresponds to each index k from at least k^ to 
15 K; 

a one-way function h processor which processes said initial value with 
said one-way function h; 

a concatenator which concatenates said Hj^^*"'^^ and said select 
information to generate H^*^ - h(H^^^-'^l|b J^^); 
20 a buffer which temporarily holds the output from said concatenator 

and outputs said output for the next value of said index k; and 

a storage part which, for each value of said index k, stores H^,^*"^ 
corresponding thereto; and 

wherein said sending means is a means which responds to a request of 
25 said server device for said index k to read out H^^^^ from said storage part and 
send said Hj^^ to said server device. 

35. The participant device of claim 28, wherein said aimed value 
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transformer comprises: 

a conversion table memory which has stored therein a conversion table 
which defines indexes k = 1, 2, . . . , K corresponding to K kinds of values 
selectable as aimed values, for converting said aimed value PR^ to the 
5 corresponding index k^^^; 

a one-way function g processor which processes said initial value IV^^ 
with a one-way function g by a predetermined number of times to generate 

a one-way function h processor which processes said g™(IV^) with a 
10 one-way function h K-k^ times to generate H^^^^ = h^'*''"(g'^(IVJ) as said 
aimed value information; and 

response generating means which responds to a request from said 
server device for k to decide whether k=k^, and if true, generates H^^*^'^^ = h*^' 
»^-i(g^(IVJ), and if false, generates Uj^''^ = g™''(IVJ; and 
15 wherein said sending means sends said H^^*^'*^ in response to said 

request from said server device for said k, 

36. The participant device of claim 28, wherein said aimed value 
transformer comprises: 

a conversion table memory which has stored therein a conversion table 
20 which defines the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto, for converting said aimed value PR^ to the 
corresponding index k^^; 

a fraction calculating part which, letting an arbitrary aimed value PR 
25 be represented by PR = F(k)-i-Q, where F(k) is a value in said conversion table 
corresponding to said k and Q is a fraction which is a positive integer which 
satisfies F(k+l)-F(k)>Q>0, calculates said fraction = PR^-F(k^) based on 
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F(kj„) obtained from said conversion table and said aimed value PR^; and 

a one-way function h processor which processes said initial value IV^^ 
with said one-way function h by the number of times corresponding to said 
to generate said aimed value information; and 
5 wherein said sending means sends said fraction to said server 

device together with said aimed value information. 

37. A server device for a system in which M participant devices send 
their aimed values to said server device and said server device determines 
which of said M participant devices has offered the maximum or minimum 

10 one of said aimed values received, said device comprising: 

a conversion table memory which has stored therein a conversion table 
which defines the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto, for converting said aimed value PR^ to the 
1 5 corresponding index k^; 

a bulletin board on which said server device writes said aimed value 
information an identifier received from each of said participant devices; 

updated initial value generating means which generates an updated 
initial value by processing said initial value with a one-way function 
20 repeatedly in correspondence with values of an index k which is a 
predetermined consecutive positive integers; 

a counter which updates said index k one by one; and 
control means which, upon each updating of said index k, compares 
said updated initial value with said aimed value information on said bulletin 
25 board to check whether they match, and determines m and k at the time of 
first detection of a match. 

38. The server device of claim 37, wherein: there are published on said 
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bulletin board = g(h*'"'(IV^)) as said aimed value information; 

said updated initial value generating means includes a one-way 
function g processor by which a response D^^^ = h^(IVjn) received from said 
participant device in correspondence with said index k is processed with a 
5 one-way function g to generate gCD^^) as said updated initial value; and 
said control means makes a check to see if there exists on said 
bulleting board said aimed value information which matches said updated 
initial value g(D^), 

39. The server device of claim 38, wherein there is published on said 
10 bulletin board = h^''^(IVn^) received from said participant device in 

advance, said server device further comprising a one-way function h 
processor which processes said response D^j^ with a one-way function h to 
generate h(Dj^), and 

wherein said control means checks whether = h(D^ holds, and if 
15 not, rewrites said C^^ with said D^^ and updates said index k on said counter. 

40. The server device of claim 37, wherein: 

there are published on said bulletin board = h^''^(IV^), said aimed 
value information h^IV^) and h(PR^(+)R^) received from said each 
participant device, said PR^^ and said being an aimed value and a random 
20 number of said each participant device m; 

said control means decides the maximum or minimum aimed value 
from said aimed values PR^ and said random numbers R^^ received from said 
participant devices, and determines the index k^^ corresponding to said 
maximum or minimum aimed value and requests said each participant device 
25 to send = h^"'''(IVn,) corresponding to said index k^,,; 

said updated initial value generating means comprises a one-way 
function h processor for processing D^^ witli a one-way function h to generate 
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j^K+i-kmx^j-)^^^ and a one-way function g processor for processing Dj with a one- 
way function g to generate g(Dj); and I 
said control means makes a check to see if said h^''^'*'"'''(D^) matches 
on said bulletin board and if said g(Dj) matches said on said bulleting 
5 board; 

41. The server device of claim 37, wherein: 

there are published on said bulletin board h(k(+)b^^*'^(+)R^^*'^) together 
with said aimed value information y^^^ received from said each participant 
device, said bj^^ being select information whether said index k corresponds to 
10 its aimed value and said R^^*^^ being a random number generated for said index 
k; 

said server device further comprises an operator for operating 
k(+)b(+)R^^*'\ and a one-way function h processor for processing the result of 
said operation with a one-way function h to generate h(k(+)b(+)R^^*'^), where 
15 b is a predetermined value which indicates that said select information bj^^ 
has selected the aimed value corresponding to said index k; and 

said control means makes a check for matching between said 
h(k(+)b(+)R J^^) and said h(k(+)b J*^^(+)R^^*^^) on said bulletin board. 

42. The server device of claim 37, wherein: 

20 there is published on said bulletin board, as said aimed value 

information, H^^^^ generated by said each participant device which, upon each 
processing of said initial value with a one-way function h, added the 
processed value with select information b^^^^^ indicating whether said value 
was an aimed value for each value of said index k and repeated this 

25 processing from at least the index k^ corresponding to said aimed value to the 
upper limit value K of said index k; 

said updated initial value generating means includes a one-way 
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function h processor by which {H„^''''\ b^,} received from said each 
participant device in answer to an inquiry for said index k is processed with a 
one-y ftinction h to generate Hj'^) = h(H„('^-^)|| b^^'^^); and 

said server device includes an updated initial value comparator for 
5 making a check to see if said Uj^^ matches previously received 

43. The server device of claim 37, wherein: letting an arbitrary aimed 
value PR be represented by PR = F(k)+Q, where F(k) is a value in said 
conversion table corresponding to said index k and Q is a fraction which is a 

;i positive integer which satisfies F(k+l)-F(k)>Q>0, there is published on said 

't 10 bulletin board said fraction Q received from said each participant device, 
=2 together with said aimed value information; 

0 said server device includes a sequencer for deciding the sequence of 

^ said fractions on said bulletin board; 

M said updated initial value generating means includes a one-way 

1 5 function h processor for processing said initial value with a one-way function 
h by k times to generate h*'(IV^) and a one-way function g processor for 
processing said h^'CIV^) with a one-way function g to generate D^^ 
g(h\lVJX and 

control means makes a check to see if said matches said aimed 
20 value information on said bulletin board in the sequence of said fractions Q^^. 

44. The server device of claim 37, wherein there is published on said 
bulletin board H = h^"*^(g^(I V^)) as said aimed value information 
received from said each participant device, which further comprises a one- 
way function h processor by which received from said each participant 

25 device as an answer to an inquiry for said k is processed with a one-way 
function h to generate h(H^^*''^^), and a one-way function g processor for 
processing said answer Hj^'^^ with a one-way function g to generate g(H^^^' 
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^^); and 

wherein said control means: makes a check to see if said h(H^^*'"^^) 
matches said aimed value information H published on said bulletin board; 
if a match is detected, updates said aimed value information H^^^^ with said 
5 H J*""^^ and decrements said index k on said counter by one; and if a mismatch 
is detected, makes a check to see if said g(H^^*''^^) matches said aimed value 
information Hj^^; and if a match is detected, determines, based on k and m at 
that time, the maximum or minimum aimed value PR^ and the participant 
device m having offered said value PR^. 

10 45. The server device of claims 37, 38, 40, 41, 42, 43 or 44, wherein: 

letting an arbitrary aimed value PR be represented by PR = F(k)+Q, where 
F(k) is a value in said conversion table corresponding to said index k and Q is 
a fraction which is a positive integer which satisfies F(k+l)-F(k)>Q>0, there 
is published on said bulletin board said fraction Q received from said each 

15 participant device, together with said aimed value information; 
said server device includes: 

a sequencer for deciding the sequence of said fractions Q^^ on said 
bulletin board; and 

select information comparator for checking whether said select 
20 information b^^^*"^ is equal to a value b indicating the selection of the aimed 
value corresponding to said index k in said decided sequence of fractions Q^,. 

46. The device of claim 29, 31, 33, 34, 36, 37, 40, 41, 43 or 44, 
wherein said sequence of index values k and said sequence of values 
selectable as said aimed values on said conversion table are monotone 

25 increasing values in the same direction, and said server device determines the 
maximum aimed value. 

47. The device of claim 29, 31, 33, 34, 36, 37, 40, 41, 43 or 44, 
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wherein said sequence of index values k and said sequence of values 
selectable as said aimed values on said conversion table are monotone 
increasing values in opposite directions, and said server device determines the 
minimum aimed value. 

5 

48. A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 
m=l,2,...,M, ina quantitative competition method for a system in which 

|K said M participant devices send their aimed values to a server device and said 

;^ 10 server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
provided a conversion table showing the relationships between a sequence of 
:3 values selectable as said aimed values and a sequence of indexes k of integral 

M values respectively corresponding thereto, said procedure comprising the 

13 15 steps of: 

(a) processing an initial value inherent to said participant device m 
with a predetermined one-way function by the number of times corresponding 
to said aimed value to generate aimed value information 

Jm = gCh-'-aV J) 

20 where g is a one-way function, IV^^^ is said initial value, k^ is an index 

corresponding to the aimed value of said participant device m and h^"'(IV^) 
indicates processing of said initial value IV^ with a one-way function h by k^ 
times; and 

(b) sending said aimed value information = g(h*'"'(IV^)) to said 
25 server device. 

49. A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 
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m = l,2, ...,M, ina quantitative competition method for a system in which 
said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
5 provided a conversion table showing the relationships between a sequence of 
values selectable as said aimed values and a sequence of indexes k of integral 
values respectively corresponding thereto, said procedure comprising the 
steps of: 

(a-1) processing an initial value inherent to said participant device m 
10 with a predetermined one-way function by the number of times corresponding 
to said aimed value to generate aimed value information 
= g(h'-(IV^)) 

where g is a one-way function, IV^^ is said initial value, is an index 
corresponding to the aimed value of said participant device m and h*""(IV^) 
1 5 indicates processing of said initial value IVj^^ with a one-way function h by 
times; 

(a-2) generating verification information C^= h^^\TV^) and sending 
said verification information to said server device together with said aimed 
value information y^,; 
20 (b) generating said initial value updated by the number of times 

requested by said server device and sending said updated initial value to said 
server device; and 

(c) sending said aimed value information = gCh^'^CIVj^)) to said 
server device. 

25 50. The recording medium of claim 49, wherein said step (b) includes 

a step of generating D,^ = h*^(IVj„) as said updated initial value corresponding 
to said index k and sending said updated initial value to said server device in 
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response to its request. 

5 1 . A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 
m = 1, 2, . . . , M, in a quantitative competition method for a system in which 
5 said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
provided a conversion table showing the relationships between a sequence of 
values selectable as said aimed values and a sequence of indexes k of integral 
10 values respectively corresponding thereto, said procedure comprising the 
steps of: 

(a-1) computing aimed value information by 
Ym = g(h^"^(IV J) 

where g is a one-way ftmction, IV^^^ is said initial value, is an index 
15 corresponding to the aimed value PR^^ of said participant device m and 
h*^(IV^ indicates processing of said initial value IV^ with a one-way 
function h by times; 

(a-2) generating verification information C^= h^^^(IV J; 
(a-3) generating h(PR^(-^)R^) from a random number and said 
20 aimed value PR^ and sending said h(PR^(+)R^) to said server device together 
with said aimed value information and said verification information C^^, 
said (-^) indicating a predetermined arbitrary operation; 

(b-1) sending said aimed value PR^ and said random number R^ to 
said server device in response to its request; and 
25 (b-2) generating = h^IV J as said updated initial value 

corresponding to said index k and sending said updated initial value to said 
server device in response to its request to present said h*'(IV^). 
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52. The recording medium of claim 51, wherein said step (a-3) is a 
step of generating h(PRjn(+)Rni) from a random number R^, said aimed value 
PR^ and additional information I^j^ about the sending of said aimed value 
information indicated by said participant device m and sending said 
5 h(PR^(+)Rj^) to said server device, said additional information 1^^ being sent 
to said server device in said step (b-2). 

53.. A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 
m=l,2, ...,M, ina quantitative competition method for a system in which 

10 said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
provided a conversion table showing the relationships between a sequence of 
values selectable as said aimed values and a sequence of indexes k of integral 

15 values respectively corresponding thereto, said procedure comprising the 
steps wherein: 

(a) upon each processing of said initial value with said one-way 
function h, said each participant device generates an updated initial value by 
adding said processed initial value with select information b^^^^ indicating 

20 whether said processed initial value is an aimed value for one value of said 
index k, and generates Hj^^ by repeatedly performing this processing from at 
least that index k^ofa sequence of indexes which corresponds to said aimed 
value to the upper limit value K, and sends said H^^^^as said aimed value 
information to said server device; 

25 (b-1) said server device requests said each participant device to send 

an updated initial value {H^^*''^^ b^^^^} corresponding to each value of said 
index k in descending order from K; and 
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(b-2) said each participant device generates and sends {H^^'^'^\ ^J^^} 
as said updated initial value to said server device. 

54. A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 

5 m=l,2,...,M, ina quantitative competition method for a system in which 
said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
provided a conversion table showing the relationships between a sequence of 

10 values selectable as said aimed values and a sequence of indexes k of integral 
values respectively corresponding thereto, said procedure comprising the 
steps of: 

(a) generating H^,^^^ = h'^"'""(g-^(IV J) as said aimed value information 
using a predetermined positive integer x„, an initial value IV^ and one-way 
15 functions h and g, and sends said aimed value information to said server 
device; 

(b-1) decides whether its received index k from said server device is 
the index k^ corresponding to said aimed value; 

(b-2) if the result of decision in step (b-1) is k = k„, generating and 
20 sending H^^*"'^^ = S^'K^^m) as said updated initial value to said server device; 
and 

(b-3) if the result of decision in said step (b-1) is not k = k^,, 
generating and sending H^^"''^ = h'^ '™-'(g'™(IVJ) as said updated initial value 
to said server device. 
25 55 . A recording medium on which there is recorded as a program the 

procedure which is followed by an m-th one of M participant devices, where 
m = 1 , 2, . . . , M, in a quantitative competition method for a system in which 
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said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
provided a conversion table showing the relationships between a sequence of 
5 values selectable as said aimed values and a sequence of indexes k of integral 
values respectively corresponding thereto, letting the initial value of said each 
participant device be represented by IV^^, said procedure comprising the steps 
of: 

(a) generating H^^^^^ = h^'^"'(g'^(IVj^)) as said aimed value information 
10 using a predetermined positive integer x^^, an initial value IV^ and one-way 
functions h and g, and sends said aimed value information to said server 
device; 

(b-1) decides whether its received index k from said server device is 
the index k^ corresponding to said aimed value; 
1 5 (b-2) if the result of decision in step (b-1) is k k^, generating H^^^"^^ 

= g^-^(IVj^) as said updated initial value and sending said updated initial 
value to said server device together with a flag indicating that said k and k^^ 
are equal; and 

(b-3) if the result of decision in said step (b-1) is not k = k^, 
20 generating and sending H^^^'^^ ^ h*'"'^'^(g^(IV J) as said updated initial value 
to said server device. 

56. A recording medium on which there is recorded as a program the 
procedure which is followed by an m-th one of M participant devices, where 
m = 1,2, . . . , M, in a quantitative competition method for a system in which 
25 said M participant devices send their aimed values to a server device and said 
server device determines which of said M participant devices has offered the 
maximum or minimum one of said aimed values received, and there is 
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provided a conversion table showing the relationships between a sequence of 
values selectable as said aimed values and a sequence of indexes k of integral 
values respectively corresponding thereto, said procedure comprising the step 
of: 

5 (a) processing, with a predetermined one-way fimction h and through 

the use of said conversion table, information k(+)b J''^(+)Rn,^''^ which contains 
each index k equal to or larger than an index k^, corresponding to said aimed 
value, select information hj^^ indicating whether said index k corresponds to 
said aimed value, and a random number Rj^K to generate at least K-k^^+l 

10 pieces of aimed value information h(k(+)bJ''^(+)R^^''^), and sends these pieces 
of aimed value information to said server device, A(+)B representing a 
predetermined arbitrary operation. 

57. The recording medium of claim 56, wherein said procedure further 
comprises a step of sending to said server device a random number Rn,^*"^ 

15 corresponding to the index k received from said server device. 

58. The recording medium of claim 56, wherein said step (a) includes 
a step of sending a random number R^^*"^ to said server device together with 
said h(k(+)b J'^>(+)R™«). 

59. The recording medium of claim 49, 51, 53, 54, 55 or 56, wherein 
20 let an arbitrary aimed value be represented by PR = F(k)+Q, where F(k) is a 

value in said conversion table corresponding to said index k and Q is a 
fraction which is a positive integer which satisfies F(k+l)-F(k)>Q>0; 

said procedure ftirther comprises a step wherein, letting said aimed 
value PR„ of said each participant device m be represented by PR„ = 
25 F(k J+Q„, said each participant device m sends said fraction Q„ to said server 
device together with said aimed value information Ym- 

60. The recording medium of claim 49, 51, 53, 54, 55 or 56, wherein 
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said sequences of indexes k and values selectable as said aimed values are 
both monotonous increasing values in the same direction. 

61. The recording medium of claim 49, 51, 53, 54; 55 or 56, wherein 
said sequences of indexes k and values selectable as said aimed values are 
both monotonous increasing values in opposite directions. 

62. The recording medium of claim 49, 51, 53, 54, 55 or 56, wherein 
said procedure further comprises the steps of: 

(0-1) sending the identifier ID^ of said each participant device to a 
provisional identifier registration device; 

(0-2) receiving a provisional identifier AJD^^ from said provisional 
identifier registration device; and 

(0-3) sending said provisional identifier AIDj^ as an identifier to said 
server device together with said aimed value information. 

63. A recording medium on which there is recorded as a program the 
procedure which is followed by a server device in a quantitative competition 
method for a system in which a plurality of participant devices send their 
aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
aimed values received, and there is provided a conversion table showing the 
relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps of: 

(a) publishing aimed value information = g(h*'"'(IV J) received from 
said each participant device on a bulletin board accessible from all of said 
participant device, g being a one-way function, IV^ being said initial value, 
k^ being an index corresponding to the aimed value of said each participant 



83 

device m and h*^(IV^) indicating processing of said initial value IV ^ with a 
one-way function h by k^^ times; 

(b) generating an updated initial value by ^ g(h\lVj„)); 

(c) checking whether there is any aimed value information y^^ which is 
5 equal to said updated initial value D^; and 

(d) upon first detection of a match in said step (c), deciding that the 
aimed value of the participant device corresponding to said updated initial 
value which matches said aimed value information y^. 

64. The recording medium of claim 63, wherein said step (a) includes 
10 a step of publishing verification information C^^ = h^''^(IV^) received from 

said each participant device on said bulletin board together with said aimed 
value information y^. 

65. The recording medium of claim 64, wherein: said step (b) includes 
the steps of: 

15 (b-1) requesting said each participant device to send = h*^(IVj„) 

corresponding to said index k; and 

(b-2) receiving from said each participant device = h^(IV^) as said 
updated initial value corresponding to said index k; and 

said step (c) includes a step of generating g(D^) and making a check 
20 for said aimed value information y^ = g(Dm)- 

66. The recording medium of claim 65, wherein: 

said step (b) includes a step (b-0) of setting said index k to an upper 
limit value K; and 

said step (c) includes the steps of: 
25 (c-1) publishing said = h^(IV^) received from said each participant 

device on said bulletin board; 

(c-2) computing said g(D^) for said each participant device m; 
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(c-3) making a check to see if said g(Dj„) matches said aimed value 
information; 

(c-4) if no match is detect for any of said m in said step (c-3), 
replacing said D^^^ with said C^^, decrementing said index k by one and 
returning to said step (b-1); and 

(c-5) if a match is detected in said step (c-3), determining that the 
value corresponding to said index k at that time is said maximum or minimum 
aimed value. 

67. The recording medium of claim 66, wherein said step (c-1) 
includes a step of generating KD^^) and making a check to see if h(Dj^) = 
holds. 

68. The recording medium of claim 66, wherein said procedure 
includes a step of publishing said determined maximum or minimum aimed 
value and said h*^'"(IVj„) on said bulletin board. 

69. The recording medium of claim 63, wherein: 
said step (b) includes the steps of 

(b-0) setting said index k to an upper limit value K; 

(b-1) inquiring said each participant device m about whether said 
aimed value information corresponds to said index; 

(b-2) checking whether an answer from said each participant device 
acknowledges said correspondence; 

(b-3) if said answer from said each participant device denies said 
correspondence, decrementing said k by one and retuming to said step (b-1); 

(b-4) if said answer from said each participant device acknowledges 
said correspondence, requesting said each participant device to present an 
updated initial value h*'(IV^); 

(b-5) pubhshing D^, = h*'(IV^) from said each participant device on 
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said bulletin board; and 

said step (c) includes the steps of: 

(c-1) generating h(D^)'s for all of said D^'s; 

(c-2) checking whether said h(Djn)'s match said verification 
5 information C^^'s on said bulletin board, respectively; 

(c-3) if no mismatch is detected in said step (c-1), generating g(Dj) for 
Dj presented by a participant device j having bid; 

(c-4) checking whether said g(Dj) matches said aimed value 
information Yj of said participant device j on said bulletin board; and 
10 (c-5) if said g(Dj) matches said Yj in said step (c-4), decides that said 

participant device j sent to said server device said aimed value information 
corresponding to said aimed value k. 

70. The recording medium of claim 63, wherein: 

said step (b) includes the steps of: 
15 (b-1) publishing its received Ym. KPRm("^)RTii) on said bulletin 

board, said (+) indicating a predetermined arbitrary operation; 

(b-2) requesting said each participant device to present its aimed value 
PR^ and random number R^; 

(b-3) determining from its received PR^ and an index k 
20 corresponding to the maximum one of said aimed values and a participant 

device j having sent said aimed value information corresponding to said index 
k; 

(b-4) requesting all of said participant devices to present h*'(IV^); and 
(b-5) receiving D^=h*'(IV J as said updated initial value from said 
25 each participant device; 

said step (c) includes the steps of: 

(c-1) pubhshing all of its received D^'s on said bulletin board; 
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(c-2) generating h(D^)'s for all of said D^'s; 
(c-3) checking whether said h(Djj^)'s match said verification 
information C^'s on said bulletin board, respectively; 

(c-4) if no mismatch is detected in said step (c-3), generating g(Dj) for 
5 Dj presented by said participant device j having sent said maximum aimed 
value determined in said step (b-4); and 

(c-5) checking whether said g(Dj) matches said aimed value 
information Yj of said participant device j on said bulletin board; and 
0 said step (d) includes a step of deciding that said participant device j 

10 sent said aimed value information for said aimed value k, if a match is 

fi detected in said step (c-5). 

Q 

p 71 . The recording medium of claim 70, wherein said step (d) includes 

3 the steps of: 

2 (d-1) generating - g(h'-\h*'(IVJ) for t such that k<t<K and for all 

2 15 of said m' s except said j ; 

(d-2) checking whether these E^'s match said aimed value information 
on said bulletin board; and 

(d-3) if no match is detected in said step (d-2), deciding that said k is 
an index corresponding to the maximum or minimum aimed value, and 
20 outputting said k and said identifier JD^ of said participant device j having 
presented said aimed value. 

72. The recording medium of claim 70 or 71, wherein 
said step (b-2) includes a step of requesting all of said participant 
devices to present additional information as well as said aimed value PR^ 
25 and said random number R^. 

73. A recording medium on which there is recorded as a program the 
procedure which is followed by a server device in a quantitative competition 



87 

method for a system in which a plurality of participant devices send their 
aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
aimed values received, and there is provided a conversion table showing the 
relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps of: 

(a) receiving, from each of participant devices, h(Hjn^^O generated as 
aimed value information of said each participant device by repeating, for each 
of a sequence of index values k from at least k^ corresponding to an aimed 
value of said each participant device to an upper limit index value K, 
processing of: 

combining an initial value of said each participant device with select 
information to provide combined information and 

operating a one-way function h on said combined information to 
generate an updated value, said select information indicating whether said 
each index value k is an aimed value or not, and 

publishing said aimed value information h(H^^^^) on a bulletin board 
accessible from all of said participant devices and any other devices as well; 

(b) requesting said each participant device to send an updated initial 
value hj^^} corresponding to each value of said index k in 
descending order from K; 

(c) publishing said updated initial value {H^^^^'^^ bj^^} on said bulletin 

board; 

(d) processing said updated initial value (H^^'"'^^, ^J^^^} ^^th said one- 
way frmction h to generate H^^^^= h(Hj^-^^||bJ*^^); 

(e) checking whether said updated initial value H^^^^ matches H^^^^ in 
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{Hj^\ bjn^*""^^^} received previously; and 

(f) if a match is detected in said step (e), deciding whether said select 
information hj^^ represents that the corresponding index k is the index k^^^ of 
said aimed value; and 
5 (g) if the result of decision in said step (f) is true, outputting said index 

k concerned and the corresponding participant device number m, and if the 
result of decision is false, said server device returns to said step (b) and 
repeats processing for the next index value k. 
D 74. A recording medium on which there is recorded as a program the 

10 procedure which is followed by a server device in a quantitative competition 
method for a system in which a plurality of participant devices send their 
0 aimed values to said server device and said server device determines which of 

Q said participant devices has offered the maximum or minimum one of said 

aimed values received, and there is provided a conversion table showing the 
-:5 15 relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps wherein said server device: 

(a) receives H^^*^^ as said aimed value information from said each 
participant device which, upon each processing of said initial value with said 

20 one-way function h, generates an updated initial value by adding said 

processed initial value with select information bj^^ indicating whether said 
processed initial value is an aimed value for one value of said index k, and 
generates H^^^^^ by repeatedly performing this processing from at least that 
index k^^ of a sequence of indexes which corresponds to said aimed value to 

25 the upper limit value K, and publishes said aimed value information H^^^^ on 
a bulletin board accessible from all of said participant device; 

(b) for each value of said index k in order descending from K, inquires 
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said each participant device about whether it has bid for said index k, said 
each participant device responding YES or NO to said inquiry; 

(c) upon first detection of the response YES, requests said each 
participant device to send its updated initial value H^^*^"^^; and 
5 (d) receives Hj^'^^ = hCHj*"'^^!! b^^*""^^) as said updated initial value from 

said each participant device and publishes said received updated initial value 
on said bulletin board; 

(e) letting a and a represent predetermined values of said select 
!g information b^^^^^^ indicating bidding and not bidding, respectively, generates, 

j!^ 10 for said participant device m having bid for the current index k, 

1 H^ = h(...h(h(Hj'^-^>lla)l|a)...|U) 

through the use of said updated initial value H^^^^'^^ and for every one of the 
:^ other participant devices m, generates 

H^ = h(.,.h(h(H^^^-^>l|a)||a)..J|a) 

2 15 through the use of said updated initial values H^^^^'^^; 

□ (f) checks whether said H^^ for said each participant device matches 

said Hj^^ published on said bulletin board; and 

(g) if a match is detected in said step (f), determines that said 
participant device having responded YES is the winning bidding device, and 
20 publishes the current value of said index k as the index k^ of the aimed value 
of said winning bidding device. 

75. A recording medium on which there is recorded as a program the 
procedure which is followed by a server device in a quantitative competition 
method for a system in which a plurality of participant devices send their 
25 aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
aimed values received, and there is provided a conversion table showing the 
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relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps of: 

(a) letting the initial value of said each participant device be 
5 represented by IV^, receiving from said each participant device H^^^^ = h^' 

^(g^(lV^)) generated as said aimed value information using a predetermined 
positive integer x^, said initial value IV^ and one-way functions h and g; 

(b) publishing said aimed value information on a bulletin board 
accessible from all of said participant devices; and 

10 (c) sending said index k to said each participant device to ask for its 

updated initial value; 

(d) processing said updated initial value H^^^'^^ with said one-way 
function h to generate h(Hj*''^^); 

(e) deciding whether said h(Hjjj^*''^^) is equal to said aimed value 
15 information Hjj^^^^; 

(f) if it is decided in said step (e) that they are equal, updating said 
aimed value information Hj^^ with said updated initial value H^^^'*^ then 
decrementing said index k by one and retuming to said step (c); 

(g) if it is decided in said step (e) that they are not equal, processing 
20 said updated initial value H^^^^"^^ with said one-way fimction g to generate 

g(H^('^-'>); and 

(h) deciding whether said g(H^^*^"^^) matches said aimed value 
information H^^^^*^^; and 

(i) deciding that the aimed value of said participant device 
25 corresponding to m and k having provided said match is the maximum or 

minimum, if a match is detected in said step (h). 

76. A recording medium on which there is recorded as a program the 
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procedure which is followed by a server device in a quantitative competition 
method for a system in which a plurality of participant devices send their 
aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
5 aimed values received, and there is provided a conversion table showing the 
relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps wherein said server device: 

(a) , letting the initial value of said each participant device be 

10 represented by IV^, where m=l,2, ...,M, M being an integer equal to or 
greater than 2, receives from each participant device, as said aimed value 
information, H^^*^^ = h^'*^(g''^(IV^)) using a predetermined positive integer x^, 
said initial value I V^^ and one-way functions h and g, and publishes said 
received aimed value information on a bulletin board accessible from all of 

15 said participant devices; 

(b) for each value of said index k in order descending from K, inquires 
said each participant device about whether it has bid for said index k, said 
each participant device responding YES or NO to said inquiry; 

(c) upon first detection of the response YES, requests said each 
20 participant device to send its updated initial value H^^^'^^; 

(d) receives from said each participant device Hj^^*^'^^ = g'^"^(IV^) if k = 
k^ and HJ^-^) = h^-^-^(g-"(IVJ) if k ^ k^; 

(e) for said updated initial value H^^^^'^^ received from said participant 
device having responded YES, generates 

25 = h^-'™g(Hj'^-^^) 

and for said updated initial value received from said each participant device 
having responded NO, generates 
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(f) checks whether said H^^ for said each participant device matches 
said Hj^^ pubhshed on said bulletin board; and 

(g) if a match is detected in said step (f), determines that said 

5 participant device having responded YES is the winning bidding device, and 
publishes the current value of said index k as the index of the aimed value 
of said winning bidding device. 

77. A recording medium on which there is recorded as a program the 
procedure which is followed by a server device in a quantitative competition 

10 method for a system in which a plurality of participant devices send their 

aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
aimed values received, and there is provided a conversion table showing the 
relationships between a sequence of values selectable as said aimed values 

1 5 and a sequence of indexes k of integral values respectively corresponding 
thereto, said procedure comprising the steps of: 

(a) letting the initial value of said each participant device be 
represented by IV^^j, receiving from said each participant device H^^^^ = h^" 
*^(g^(IV^)) generated as said aimed value information using a predetermined 

20 positive integer x^, said initial value IV^ and one-way functions h and g; 

(b) publishing said aimed value information H^^*^^ on a bulletin board 
accessible from all of said participant devices; and 

(c) sending said index k to said each participant device to ask for its 
updated initial value; 

25 (d) checking whether its received updated initial value H^^^ is added 

with said flag; 

(e) if it is decided in said step (d) that said flag is added, processing 
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said updated initial value H^^*^"'^ with said one-way function g to generate 

(f) deciding whether said g(H^^^"*^) matches said aimed value 
information H J^^; 

5 (g) if it is decided in said step (d) that no flag is added, processing said 

updated initial value H^^^'^^ with said one-way function h to generate KH^^*"' 

(h) deciding whether said h(H^^*''^^) matches said aimed value 
information H J^^; 

10 (i) if it is decided in said step that they are equal, updating said aimed 

value information H^^^^^^ with said initial value H^^*''^^ then decrementing said 
index k by one and returning to said step (c); and 

(j) if it is decided in said step (h), processing said initial value H^^^"^^ 
with said one-way function g to generate g(H^^*''^^) and returning to said step 

15 (f);and 

(k) if a match is detected in said step (f), deciding that the aimed value 
of said participant device corresponding to m and k having provided said 
match is the maximum or minimum. 

78. A recording medium on which there is recorded as a program the 

20 procedure which is followed by a server device in a quantitative competition 
method for a system in which a plurality of participant devices send their 
aimed values to said server device and said server device determines which of 
said participant devices has offered the maximum or minimum one of said 
aimed values received, and there is provided a conversion table showing the 

25 relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes k of integral values respectively corresponding 
thereto, and m = 1, 2, . . . , M, M being an integer equal to or greater than 2; 
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said procedure comprising the steps of: 

(a) receiving from each of said participant devices at least 
pieces of aimed value information . h(k(+)b J*'^(+)R^^*'^) generated by 
processing, with a predetermined one-way function h and through the use of 
5 said conversion table, information k(+)bn^^^^(+)R^^*'^, which contains each 
index k equal to or larger than an index k^ corresponding to said aimed value, 
select information hj-^^ indicating whether said index k corresponds to said 
aimed value, and a random number Rj^\ A(+)B representing a predetermined 
arbitrary operation between A and B; 
10 (b) receiving and publishing said aimed value information on a 

bulletin board accessible from all of said participant devices; 

(c) obtaining said random number corresponding to each of said 
sequence of indexes k; 

(d) calculating h(k(+)a(+)R J^^), where a is a predetermined value with 
15 which said select information b^^^^ indicates said aimed value; 

(e) checking said aimed values on said bulletin board for matching 
with said calculated h(k(+)a(+)R^^''^); and 

(f) if a match is detected in said step (e), deciding that the aimed value 
of the aimed value information of a participant device having sent said 

20 random number R^^*"^ at that time is the maximum or minimum value. 

79. The recording medium of claim 78, wherein said procedure further 
comprises a step of repeating said steps (c), (d) and (e) if a match is detected 
in said step (d). 

80. The recording medium of claim 79, wherein said step (c) includes 
25 the steps of: requesting said each participant device to send said random 

number Kj^^ corresponding to said index k; and receiving said random 
number R^^*"^ from said each participant device. 
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81. The recording medium of claim 79, wherein: 

said step (a) includes a step of receiving said random number R^^*"^ 
sent from said each participant device together with said aimed value 
information h(k(-f)b J»^>(+)R^(*^>); 

said step (b) includes a step of storing said random number R^^*^^ in a 
nonpublic memory; and 

said step (c) includes the steps of: requesting said each participant 
device to send said random number R^^*^^ corresponding to said index k; and 
receiving said random number R^^*^^ from said each participant device. 

82. The recording medium of claim 63, 64, 69, 70, 73, 74, 75, 76, 77 
or 78, wherein said sequences of indexes k and values selectable as said 
aimed values are both monotonous increasing values in the same direction, 
and in said step (c) said server device determines the maximum aimed value. 

83. The recording medium of claim 63, 64, 69, 70, 73, 74, 75, 76, 77 
or 78, wherein said sequences of indexes k and values selectable as said 
aimed values are both monotonous increasing values in opposite directions, 
and in said step (c) said server device determines the minimum aimed value. 

84. The recording medium of claim 63, 64, 69, 70, 73, 74, 75, 76, 77 
or 78, wherein let an arbitrary aimed value be represented by PR F(k)+Q, 
where F(k) is a value in said conversion table corresponding to said index k 
and Q is a fraction which is a positive integer which satisfies F(k+1)- 
F(k)>Q>0; 

said step (a) includes a step wherein, letting said aimed value PRj„ of 
said each participant device m be represented by PR^ = F(kj^)+Q^, said server 
device receives from each participant device m said aimed value information 
generated by processing said initial value with said one-way function h by the 
number of times corresponding to k^, together with said fraction Q^, where m 
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= 1, 2, M, said M being an integer equal to or greater than 2, and said 
server device publishes said aimed value information and said fraction on 
a bulletin board accessible from all of said participant devices; 

said step (c) includes a step where said server device makes a check 
for matching between said updated initial value and said aimed value 
information for each index value in an ascending or descending order of said 
fraction where m ^ 1 , 2, . . . , M; and 

said step (d) includes a step wherein, upon first detection of a match in 
said step (c), said server device finishes said check and determines, from k^^ 
and m at the time of detecting the match, that PR^ = F(k^)+Qj^ is said 
maximum or minimum aimed value. 

85. The recording medium of claim 78 or 79, wherein let an arbitrary 
aimed value be represented by PR = F(k)H-Q, where F(k) is a value in said 
conversion table corresponding to said index k and Q is a fraction which is a 
positive integer which satisfies F(k+l)-F(k)>Q>0; 

said step (a) includes a step wherein, letting said aimed value PR^^ of 
said each participant device m be represented by PR^ = F(km)+Qm^ said server 
device receives said fraction Q^^ together with said aimed value information; 

said step (b) includes a step of publishing said fraction on said 
bulletin board together with said aimed value information, where m = 1, 2, . . . , 
M, said M being an integer equal to or greater than 2; 

said step (e) includes a step of making said check for matching for 
each index value in an ascending or descending order of said fraction 
where m = 1, 2, . . . , M; and 

said step (f) includes a step wherein, upon first detection of a match in 
said step (c), said server device finishes said check and determines, from k^ 
and m at the time of detecting the match, that PR^ = F(kin)+Qm is said 
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maximum or minimum aimed value. 

86. A quantitative competition system which comprises a server 
device and M participant devices each connected via a communication 
5 channel to said server device and in which said M participant devices send 
their aimed values to said server device and said server device determines 
which of said M participant devices has offered the maximum or minimum 
one of said aimed values received, 

each of said participant devices comprising: 
10 aimed value generating means for generating an aimed value PR^; 

aimed value transforming means provided with a conversion table 
memory having stored therein a conversion table which defines the 
relationships between a sequence of values selectable as said aimed values 
and a sequence of indexes corresponding thereto, for converting said aimed 
1 5 value PR^^ to the corresponding index and which processes said aimed 
value with a predetermined one-way function by the number of times 
corresponding to said aimed value to obtain aimed value information; and 

sending means for sending to said server device said aimed value 
information and an identifier identifying said participant device; and 
20 said server device comprising: 

a conversion table memory which has stored therein a conversion table 
which is the same as said conversion table; 

a bulletin board on which said server device writes said aimed value 
information an identifier received from said each participant device; 
25 updated initial value acquiring means which acquires an updated 

initial value obtained by processing said initial value with a one-way function 
repeatedly in correspondence with values of an index k which is a 
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predetermined consecutive positive integers; 

a counter which updates said index k one by one; and 

control means which, upon each updating of said index k, compares 

said updated initial value with said aimed value information on said bulletin 
5 board to check whether they match, and determines m and k at the time of 

first detection of a match. 

87. The system of claim 86, wherein said each participant device has 
initial value updating means for processing said initial value with a oneOway 
function h to generate an updated initial value and for sending said updated 

10 initial value to said server device, and said updated initial value acquiring 
means of said server device receives said updated initial value from said each 
participant device. 

88. The system of claim 86, wherein said updated initial value 
acquiring means of said server device processes said initial value with a one- 

15 way function h to generate said updated initial value. 

89. The system of claim 87 or 88, wherein said aimed value 
transformer of said each participant device comprises: 

a one-way fimction h processor which processes an initial value YV^ 
inherent to said participant device with a one-way function h by the number 
20 of times corresponding to said index k^ to obtain an output h'^'"(IV^); and 

a one-way function g processor which processes said output from said 
one-way frinction h processor with a one-way fimction g to obtain said aimed 
value information. 

90. The system of claim 89, wherein said aimed value transformer of 
25 said each participant device includes verification information generating 

means for processing said initial value IV^^ with said one-way fimction h by 
K+l times to generate ^ h^"^(IV^) as verification information and for 
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sending said verification information to said server device; 

wherein there is pubhshed on said bulletin board = h^^^(IV^) 
received from said each participant device in advance, said server device 
fiirther comprising a one-way function h processor which processes said 
5 response D^^, with a one-way function h to generate h(Dj^), and 

wherein said control means checks whether C^^ = h(D^) holds, and if 
not, rewrites said C^, with said D^^ and updates said index k on said counter. 

91. The system of claim 86, wherein said each participant device 
comprises: 

10 a random generator for generating a random number R^; 

an operating device for operating said random number and said 
aimed value PR^ to obtain PRni(+)Rm? where (+) represents a predetermined 
arbitrary operation; 

one-way function h processing means for processing said PR^(+)R^ 
15 with a one-way function h to obtain h(PRjjj(+)R^); and 

verification information generating means for processing said initial 
value IV^ with said one-way fimction h K+1 times to generate = 
h'^^'CIV J; and wherein: 

said h(PR^(+)R^) and said verification information are sent to said 
20 server device together with said aimed value information; 
in said server device: 

there are published on said bulletin board = h^^^(IVj^), said aimed 
value information = h*^(IVj„) and h(PRj„(+)R^) received from said each 
participant device, said PR^^ and said R^^, being an aimed value and a random 
25 number of said each participant device m; 

said control means decides the maximum or minimum aimed value 
from said aimed values PR^ and said random numbers R^ received from said 
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participant devices, and determines the index k^^^ corresponding to said 
maximum or minimum aimed value and requests said each participant device 
to send (D^) = h*^''(IV^) corresponding to said index k^^; 

said updated initial value acquiring means comprises a one-way 
function h processor for processing with a one-way function h to generate 
j^K+i-kmx^£)^>^^ and a one-way function g processor for processing Dj with a one- 
way function g to generate g(Dj); and 

said control means makes a check to see if said h^'^^'*^"^''(D^) matches 
on said bulletin board and if said g(Dj) matches said Ym on said bulleting 



92. The system of claim 86, wherein said aimed value transformer of 
said each participant device comprises: 

a conversion table memory which has stored therein a conversion table 
which defines indexes k = 1, 2, . . . , K corresponding to K kinds of values 
15 selectable as aimed values; 

a select information generator which generates select information b^^^*"^ 
indicating whether to select an aimed value corresponding to each of said 
indexes k = 1,2, . . . , K; 

a random generator which generates a random number R^^^^ inherent 
20 to said participant device m and said index k; 

an operating device which receives said index k, said random number 
R^^^^ and said select information hj^^ and performs an operation 
k(+)bJ^>(-^)R^^^^; 

a one-way function h processor which processes said k(+)b J*'^(+)R^^''^ 
25 with a one-way function h to obtain h(k(+)b^^^X+)Rm^^^); 

a control device which computes said h(k(+)b J*'^(+)R^^^^) for each of 
said indexes k and provides the k pieces information as said aimed value 
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information; i 

in said server device: 

there are published on said bulletin board h(k(H-)bn^^*^^(+)Rj^^^^) together 
with said aimed value information received from said each participant 
5 device; 

said server device further comprises an operator for operating 

k(+)b(+)R„,^''^; and 

a one-way function h processor for processing the result of said 
operation with a one-way function h to generate h(k(+)b(+)R^^^^), where b is a 
10 predetermined value which indicates that said select information hj^^ has 
selected the aimed value corresponding to said index k; and 

said control means makes a check for matching between said 
h(k(+)b(+)R and said h(k(+)b^^^^(+)R^^'>) on said bulletin board. 

93. The system of claim 86, wherein said aimed value transformer of 
15 said each participant device comprises: 

a conversion table memory which has stored therein a conversion table 
which defines indexes k = 1,2, . . . , K corresponding to K kinds of values 
selectable as aimed values, for converting said aimed value PR^ to the 
corresponding index k^; 
20 initial value updating means which, for each index k, processes an 

initial value with a one-way function h and adds the processed initial value 
with select information bj^^ for said index k to obtain an updated initial value 
and repeats this processing until k = K is reached, thereby generating H^^^^; 
a one-way function h processor for outputting said updated initial 
25 value H^^*^^^ from said initial value updating means as said aimed value 
information; 

select information generator which generates said select information 
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bj*^^ whether said aimed value corresponds to each index k from at least to 

a concatenator which concatenates said Hj^"^^ from said one-way 
function h processor and said select information b^,^*^^ to generate H^*^ = h(Hjn^*^' 

a buffer which temporarily holds the output from said concatenator 
and outputs said output for the next value of said index k; 

a storage part which, for each value of said index k, stores H^^^^*"^ 
corresponding thereto; and 
10 a second one-way function h processor by which H^^^^^ obtained by 

repeating processing until k = K, is processed with a one-way function h to 
generate h(H^^*'^), said h(H J^^) being output as said aimed value information; 

wherein said sending means is a means which responds to a request of 
said server device for said index k to read out H^^^^ from said storage part and 
1 5 send said H^^*^^ to said server device; 

in said server device: 

there are published on said bulletin board, as said aimed value 
information, h(Hj„^^^) obtained by processing, with a one-way frmction h, H^^*^^ 
generated by said each participant device which, upon each processing of said 

20 initial value with a one-way function h, added the processed value with select 
information b^^^^ indicating whether said value was an aimed value for each 
value of said index k and repeated this processing from at least the index 
corresponding to said aimed value to the upper limit value K of said index k; 
said initial value updating means includes a one-way function h 

25 processor by which {Hj^"^\ b^^} received from said each participant device in 
answer to an inquiry for said index k is processed with a one-y function h to 
generate H^^*^) = hCH^^"^-^)!! bj^>); and 
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said server device includes an updated initial value comparator for 
making a check to see if said Hj^^ matches Uj^^ in {Rj^\ hj^^'^} 
previously received. 

94. The system of claim 86, wherein said aimed value transformer of 
said each participant device comprises: 

a conversion table memory which has stored therein a conversion table 
which defines indexes k = 1,2, . . . , K corresponding to K kinds of values 
selectable as aimed values, for converting said aimed value PR^ to the 
corresponding index k^; 

a one-way function g processor which processes said initial value IV^, 
with a one-way function g by a predetermined number of times x^ to generate 

a one-way function h processor which processes said ^(IV^) with a 
one-way function h K-k^ times to generate H^^*^^ = h^"^(g^(IV J) as said 
aimed value information; and 

response generating means which responds to a request from said 
server device for k to decide whether k=k^, and if true, generates H^^*^'^^ = h^' 
•^■'(g^CIVJ), and if false, generates H^^'^"^^ - g^-^(IVJ; and 

wherein said sending means sends said H^^^*^'^^ in response to said 
request from said server device for said k; and 

in said server device: 

there is published on said bulletin board H^^^^ = h^'^Cgf'^'CI V J) as said 
aimed value information received from said each participant device, which 
further comprises a one-way function h processor by which H^^*^'^^ received 
from said each participant device as an answer to an inquiry for said k is 
processed with a one-way function h to generate h(Hj*''^^), and a one-way 
function g processor for processing said answer H^^^^'^^ with a one-way 
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function g to generate g(Hj*'"^^); and 

said control means: makes a check to see if said h(H^^*^'*^) matches said 
aimed value information H^^^^ published on said bulletin board; if a match is 
detected, updates said aimed value information Hj^^ with said H^^*""^^ and 
decrements said index k on said counter by one; and if a mismatch is detected, 
makes a check to see if said g(H^^*^'^^) matches said aimed value information 
H^^^^; and if a match is detected, determines, based on k and m at that time, 
the maximum or minimum aimed value PR^ and the participant device m 
having offered said value PR^^,. 

95. The system of claim 86, 87, 88, 91, 92, 93 or 94, wherein said 
aimed value transformer of said each participant device comprises; 

a conversion table memory which has stored therein a conversion table 
which defines the relationships between a sequence of values selectable as 
said aimed values and a sequence of indexes k of integral values respectively 
corresponding thereto, for converting said aimed value PR^ to the 
corresponding index k^^; 

a fraction calculating part which, letting an arbitrary aimed value PR 
be represented by PR = F(k)+Q, where F(k) is a value in said conversion table 
corresponding to said k and Q is a fraction which is a positive integer which 
satisfies F(k+l)-F(k)>Q>0, calculates said fraction Q^^^ = PR^-F(k^) based on 
F(k^) obtained from said conversion table and said aimed value PR^,; and 

a one-way function h processor which processes said initial value IV^^^ 
with said one-way function h by the number of times corresponding to said k^ 
to generate said aimed value information; and 

wherein said sending means sends said fraction to said server 
device together with said aimed value information; and 

in said server device: 
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there is published on said bulletin board said fraction Q^^ received 
from said each participant device together with said aimed value information; 
and said server device comprises: 

a sequencer for deciding the sequence of said fractions on said 
bulletin board; and 

select information comparator for checking whether said select 
information b^^^*^^ is equal to a value b indicating the selection of the aimed 
value corresponding to said index k in said decided sequence of fractions Q^. 

96. The system of claims 86, 87, 88, 91, 92, 93 or 94, wherein said 
sequence of index values k and said sequence of values selectable as said 
aimed values on said conversion table are monotone increasing values in the 
same direction, and said server device determines the maximum aimed value. 

97. The system of claims 86, 87, 88, 91, 92, 93 or 94, wherein said 
sequence of index values k and said sequence of values selectable as said 
aimed values on said conversion table are monotone increasing values in 
opposite directions, and said server device determines the minimum aimed 
value. 



